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Top Stories 

• Approximately 140 people including passengers and crew on board Royal Caribbean’ s 
Voyager of the Seas developed gastrointestinal symptoms resembling norovirus upon 
returning from New Zealand to Sydney, according to a Royal Caribbean blog report 
November 23. - Denver Examiner (See item 10 ) 

• Peanut products, manufactured by Sunland Inc. in Portales, New Mexico, responsible for 
sickening at least 41 people in the U.S. with Salmonella have fallen under the scrutiny of 
international food safety authorities, Food Safety News reported November 26. - Food 
Safety News (See item 11 ) 

• Two individuals watching the Macy’s Thanksgiving Day Parade in New York City 
November 22 discovered that shredded documents containing sensitive police information 
were among the confetti being thrown for the parade. - Help Net Security (See item 18 ) 

• A utility worker responding to reports of a natural gas leak in Springfield, Massachusetts, 
punctured a pipe and an unknown spark ignited a massive explosion that injured 18 people 
and damaged 42 buildings November 23. - Associated Press (See item 27 ) 
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Energy Sector 



1 . November 26, Rigzone - (Louisiana; International) Second death confirmed from 
Black Elk explosion in the GOM. An oil worker who was badly burned in an 
explosion incident aboard the Houston-based and private-owned Black Elk Energy oil 
platform in the Gulf of Mexico died from his injuries November 23, the Philippines 
Embassy confirmed in a statement. His death brought the fatality toll from the 
November 16 incident to two. Three more workers are still being treated for serious 
wounds from the blaze, while a sixth worker has still not been found. Black Elk was 
issued a subpoena by the U.S. Chemical Safety Board seeking details on the company’s 
safety and environmental management plans and audits by the U.S. Department of 
Interior. Black Elk is required to respond to the subpoena by November 30. Early 
reports from the U.S. Coast Guard November 16 stated that production was not flowing 
from the well and at least 26 to 28 people have been aboard the platform. The workers 
were cutting into a long on the platform when sparks from a torch hit a storage tank, 
which then exploded. The platform is located 17 miles offshore Grand Isle, Louisiana, 
in 2 1 feet of water. 

Source: 

http://www.rigzone.com/news/oil gas/a/1 223 19/Second Death Confirmed from Blac 
k Elk Explosion in the GOM 

2. November 26, KIFI 8 Idaho Falls - (Idaho) Faulty insulator causes power outage for 
30,000 in upper valley. Nearly 30,000 customers in Idaho’s upper valley were without 
power for several hours November 26. Rocky Mountain Power personnel indicated the 
outage was caused by a faulty insulator located on the 161 line feeding the Rigby area. 
The outage occurred to 29,561 Rocky Mountain Power customers in several towns. Fall 
River crews were immediately dispatched, but were unable to restore power to the sub- 
stations until Rocky Mountain could repair the 161 transmission line feeding the 
stations. 

Source: http://www.localnews8.com/news/Faulty-insulator-causes-power-outage-for- 
30-000-in-Upper-Vallev/-/308662/17542296/-/xyott8/-/index.html 

3. November 24, Mokena Patch - (Illinois) Mokena oil tank leak under 
investigation. Cleanup continued through the weekend of November 24 after 900 
barrels of crude oil leaked from a storage tank at BP Oil-Enbridge Storage in 
unincorporated Mokena, Illinois. The leak of crude oil, destined for Superior, 
Wisconsin, was discovered November 20 at the storage facility. According to an 
Enbridge Inc. spokesperson, the U.S. Pipeline and Hazardous Materials Safety 
Administration was notified of the accident. The cause of the accident was due to a 
“failure on the line,” said the spokesman, speaking on behalf of Calgary, Alberta-based 
crude oil distributor. A definite leak of 37,800 gallons of crude oil was confirmed to 
have escaped from an “infrequently used Enbridge tankage line” November 21 . The 
leak was contained to a dike that surrounds the tank. The surface oil was sopped up, but 
crews were still working to collect the drenched soil surrounding the dike. According to 
an Enbridge press release, “The situation does not pose a health or safety risk to the 
community.” The spokesman reiterated that “all of the oil was contained entirely within 
one of the storage tank dikes inside the facility, and all the visible oil within the tank 
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dike has now been recovered.” 

Source: http://mokena.patch.com/articles/mokena-oil-tank-leak-under-investigation 
For another story, see item 27 



[ Return to top ] 

Chemical Industry Sector 

Nothing to report 



[ Return to top ] 

Nuclear Reactors, Materials and Waste Sector 

4. November 26, South Jersey Times - (New Jersey) Valve problem causes Salem 2 
nuclear reactor to shut down. Operators are working to restart the Salem 2 nuclear 
reactor in Lower Alloways Creek Township, New Jersey, after it was shut down 
November 25 because of a valve problem on the non-nuclear side of the plant. The 
reactor automatically shut down after a valve that controls water flowing through the 
steam generators did not respond to control room operators’ directions. “The plant 
responded as designed with no major issues,” a spokesman for the plant’s operator, 
PSEG Nuclear, said. The valve is on one of the feedwater pumps that supplies the water 
to the steam generators. An official from the Nuclear Regulatory Commission said the 
shutdown was “uncomplicated.” 

Source: 

http://www.ni.com/salem/index.ssf/2012/ll/valve problem causes salem 2 n.html 

[ Return to top ] 

Critical Manufacturing Sector 

Nothing to report 



[ Return to top] 



Defense Industrial Base Sector 

5. November 25, UPI - (National; International) U.S. body armor plates being 
replaced. The U.S. military said it would issue replacement body armor plates to 
troops in the field after the manufacturer issued a recall, UPI reported November 25. 
Thousands of armor plates used in body armor issued to U.S. Special Operations 
personnel were recalled after defects were detected in about 5 percent of them, Special 
Operations Command told ABCNews.com. The defects were found in the Generation 
III armor plates manufactured by California’s Ceradyne, Inc. Ceradyne has been 
replacing the plates with the Generation II model. The plates are inserted into standard 
bullet proof vests as an added measure of protection. Special Operations Command said 
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there were no casualties linked to Generation III plates. 

Source: http://www.upi.com/Top News/US/20 12/1 1 /25/US -body-armor-plates-being- 
replaced/UPI-23791353861715/#axzz2DLFMsr9V 



[ Return to top ] 

Banking and Finance Sector 

6. November 25, KFVS 12 Cape Girardeau - (Missouri; Michigan) Forgery suspects 
found in Perryville. A Michigan man’s stolen credit card information lead to three 
arrests in Perryville, Missouri, where three men were arrested for credit card fraud. The 
Michigan man reported his card being used fraudulently in Perryville November 23. 
Police then used surveillance video to identify the suspects, who were later found at a 
local hotel. Police obtained a search warrant for the room where the suspects were 
found. Officers said they found a laptop computer connected to stripe card 
reader/writer. They also found 112 credit cards and gift cards. Police said the suspects 
were creating usable credit cards and gift cards by transferring other persons personal 
information onto the cards. Police also found 23 more cards inside a vehicle owned by 
one of the suspects. They also found more than $1,000 worth of cigarettes, which were 
purchased using the fraudulent credit cards. 

Source: http://www.kfvsl2.com/storv/20177571/forgerv-suspects-found-in-perryville 

7. November 24, Orange County Register - (California) Police arrest suspect in 
‘desperate bandit’ robberies. Law-enforcement authorities believe they arrested the 
“desperate bandit” November 23, wanted in connection with numerous bank robberies 
in California’s Orange, Riverside, and San Bernardino counties. Indio police arrested a 
man after a bank robbery in that city. A FirstBank branch was robbed after a man 
approached the teller with a note demanding money. Police radioed the car’s 
description and an officer spotted a vehicle matching that description on westbound I- 
10 about a mile west of the bank, an Indio police spokesman said. The car was pulled 
over and the driver arrested. A two-liter plastic bottle filled with clear liquid and 
suspicious wiring was found by investigators during a search of the car. The Riverside 
Sheriff’s Department sent out its Hazardous Device Team in response and determined 
that the device was not a bomb. FBI officials suspected the man might be connected to 
the nine robberies that occurred over the past year because of the nature of the crime 
and the man’ s physical description. 

Source: http://www.ocregister.com/news/bank-378651-police-downing.html 

[ Return to top i 

Transportation Sector 

8. November 26, WUSA 9 Washington D.C. - (Washington, D.C.) Reston Limousine 
shuttle bus, Jeep, sedan crash on Nebraska Avenue NW in D.C.; drivers and 
children injured. An accident involving two cars and a Reston Limousine shuttle bus 
headed to the Field School in the 4100 block of Nebraska Avenue NW in Washington, 
D.C., injured more than 20 people, WUSA 9 Washington, D.C. reported November 26. 
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One boy was found outside the bus next to a broken window, and officials suspect he 
was ejected from the bus. District of Columbia firefighters stated on Twitter that 18 
children were on the bus at the time. Fire officials reported that 5 people — 3 adults 
and two children — were transported by ambulance to the hospital. Sixteen people 
were transported via a mass ambulance bus. One of the people injured was the bus 
driver. The drivers of the other two vehicles were also transported to the hospital. The 
4000-4200 Nebraska Avenue, NW and 4100-4200 Van Ness blocks were closed to 
traffic. 

Source: http://www.wusa9.com/news/article/230854/373/21-Taken-To-Hospital-After- 
Bus-Cars-Collide-In-NW-DC 



9. November 26, KTRK 13 Houston - (Texas) DPS: Highway 59 shut down in Wharton 
Co. due to overturned propane truck. Highway 59 was shut down in both directions 
November 26 in Wharton County, Texas, following an accident involving a propane 
truck, according to Texas Department of Public Safety officials. The accident occurred 
at County Road 423. A truck was sent to offload the propane, but officials warned that 
the highway would be shut down. There was a second major accident in Wharton 
County along Highway 7 1 near Danevang, just south of El Campo. Officials said 12-15 
vehicles were involved, including a school bus. 

Source: http://abclocal.go.com/ktrk/story?section=news/local&id=8898175 

10. November 23, Denver Examiner - (International) Noro virus outbreak sickens 140 on 
Royal Caribbean’s ‘Voyager of the Seas’. Approximately 140 passengers and crew 
on board Royal Caribbean’s Voyager of the Seas developed gastrointestinal symptoms 
resembling norovirus upon returning from New Zealand to Sydney, according to a 
Royal Caribbean blog report November 23. Those infected with the stomach bug 
responded well to over-the-counter medications administered on board the ship. Cruise 
officials notified passengers November 23 that they would begin cleaning and 
sanitizing guest rooms per Centers for Disease Control and Prevention 
recommendations. Because of these events, big lines were formed at the Overseas 
Passenger Terminal in Circular Quay, which stretched hundred of meters. The Voyager 
of the Seas can hold 3,138 passengers and over 1,100 crew members. Norovirus is 
spread person to person particularly in crowded, closed places. 

Source: http://www.examiner.com/article/norovirus-outbreak-sickens-140-on-royal- 
caribbean-s-voyager-of-the-seas 



[ Return to top ] 

Postal and Shipping Sector 

Nothing to report 
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Agriculture and Food Sector 



1 1 . November 26, Food Safety News - (International) Sunland recall goes 
international. Peanut products manufactured by Sunland Inc. in Portales, New 
Mexico, responsible for sickening at least 41 people in the U.S. with Salmonella have 
fallen under the scrutiny of international food safety authorities in recent weeks, Food 
Safety News reported November 26. Consumers in Canada, Hong Kong, France, the 
United Kingdom, Italy, and Norway have received warnings about the potential danger 
of imported Sunland products. November 21, the UK’s Food Standards Agency issued 
a warning to UK consumers concerning Sunland’ s products, noting that while Sunland 
products were likely not sold in UK supermarkets, they may be sold by some online 
retailers who import American foods. Consumers in Hong Kong were warned of 
Sunland peanut butter back November 8. Two Sunland-brand Valencia peanut butter 
products were imported to Hong Kong and may be contaminated. Canadians received a 
number of warnings about Sunland products as well, with many of the products 
recalled in the U.S. also having been shipped to Canada. 

Source: http://www.foodsafetynews.eom/2012/l 1/sunland-recall-goes- 
international/?utm source=feedbumer&utm medium=feed&utm campaign=Feed:+foo 
dsafetynews/mRcs+(Food+Safety+News) 

12. November 24, Food Safety News - (International) Canadian meat processing plant 
suspended over Listeria scare. Operations were suspended at a meat processing plant 
in Edmonton, Alberta November 23 after a Listeria infection was detected on an 
employee, Reuters reported. Capital Packers, Inc., detected the bacteria on an employee 
and contacted the Canadian Food Inspection Agency (CFIA), which suspended 
operations at the plant after learning that the company could not properly track the 
whereabouts of any of its products. Capital Packers initially told the CFIA that 
potentially affected products were under its control, but the CFIA determined that 
products may have been shipped to several provinces. The company sells bacon, 
sausages, fresh meats, and other products to western Canada and the Northwest 
Territories. The company has voluntary recalled ham sausages under the brand names 
Capital and Compliments. 

Source: http://www.foodsafetynews.eom/2012/l 1/canadian-meat-processing-plant- 
suspended-over-listeria-scare/ 

13. November 23, U.S. Food and Drug Administration - (National) Newman’s Own, Inc. 
issues voluntary recall of Newman’s Own Lite Honey Mustard Dressing due to 
undeclared milk. Newman’s Own, Inc. announced November 23, the voluntary recall 
of Newman’s Own Lite Honey Mustard Dressing because it contains undeclared milk. 
No other Newman’s Own products or flavors are impacted. The products are sold in 
retail stores in the eastern to midwestern U.S. The affected packages are 16-ounce 
bottles of Newman’s Own Lite Honey Mustard Dressing that have a sell-by date of 
October 16, 2013. Only the products with time codes from 12:47 to 13:30 are affected. 
The recall was initiated after it was discovered that Newman’ s Own Lite Honey 
Mustard Dressing was labeled with an incorrect back label that did not list the allergen 
milk. 

Source: http://www.fda.gov/Safety/Recalls/ucm329277.htm 
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14. November 21, U.S. Food and Drug Administration - (Washington; Oregon) Legendary 
Baking issues allergy alert on undeclared egg in pies labeled as. Legendary Baking 
of Denver recalled November 21, 726 Private Selection 9-Inch pies labeled as “Apple 
Lattice” because the pies may contain undeclared eggs. Private Selection 9-Inch pies 
labeled as “Apple Lattice” were distributed to Quality Food Centers (QFC) in 
Washington State and Oregon only, with sell by dates of November 4 through 
November 26, 2012. The 9-Inch pies are sealed in a brown cardboard box with a see- 
through plastic label and sold as a fresh item at the consumer level. The recalling firm 
initiated the recall after it was discovered that product containing egg was distributed in 
packaging that may not comply with applicable regulations regarding disclosure of egg 
as an ingredient. 

Source: http://www.fda.gov/Safety/Recalls/ucm329274.htm 



[ Return to top ] 



Water Sector 



15. November 23, WISH 8 Indianapolis - (Indiana) Raw sewage overflow warning 
issued. A raw sewage overflow warning was issued for parts of Indianapolis, Indiana, 
November 23. When a quarter of an inch of rain moves in, the sewer system can 
overflow and cause raw sewage and rainwater to pour into nearby streams. Due to 
recent rainfall, raw sewage overflow occurred. At afected discharge points, Citizens 
Energy posted signs to identify areas where water could present a health hazard. 
Citizens Energy asked residents to avoid all contact with streams for the next 4 days 
downstream of the Combined Sewer areas. 

Source: http://www.wishtv.com/dpp/news/local/marion county/raw-sewage-overflow- 
warning-issued 



[ Return to top ] 



Public Health and Healthcare Sector 



Nothing to report 



[ Return to top ] 



Government Facilities Sector 



16. November 25, Denver Examiner - (Texas) Anonymous holds school district Web site 
hostage over student tracking. Hacktivists associated with the international collective 
known as Anonymous claimed responsibility for taking down San Antonio, Texas’s 
Northside Independent School District’s Web site November 24 in protest of the 
district’s controversial student tracking program. The program requires students to wear 
name badges that enable school officials to track the location of students. The same 
hacktivists released another statement November 25 via Pastebin giving the school 
district “1-3 days” to meet with parents and explain the student tracking program in 
detail. If the district fails to comply with the request, hacktivists threatened to “simply 
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shut down” the school district Web site once again. 

Source: http: //www. examiner .com/article/anonymou s-holds-school-di strict-website- 
hostage-over-student-tracking 

17. November 24, Associated Press - (Washington, DC) State Department fire leaves 
four people under evaluation. Authorities said three maintenance workers were 
seriously injured after a fire broke out at the State Department headquarters in 
Washington, D.C., November 24. A fire and EMS spokesman said the fire broke out in 
the ductwork on the 7th floor. Workers were able to put out the fire before firefighters 
arrived, but three people suffered burns. One person suffered life-threatening injuries 
and two others had serious but non-life-threatening injuries. All three were taken to 
Washington Hospital Center. A State Department spokeswoman said the fire broke out 
during routine maintenance to a mechanical area of the building. She said the building 
was briefly evacuated and then reopened. 

Source: http: //www. wjla. com/articles/20 12/11 /state-department-fire -lea ves-four-under- 
evaluation-82416.html 



For another story, see item 33 



[ Return to top i 

Emergency Services Sector 

18. November 26, Help Net Security - (New York) Shredded police documents showered 
down on Macy’s parade spectators. Two individuals watching the Macy’s 
Thanksgiving Day Parade in New York City November 22 discovered that shredded 
documents containing sensitive police information were among the confetti being 
thrown for the parade. After picking it up and examining it, they realized it contained 
numbers and the acronym “SSN.” They thought the number was likely a social security 
number, and decided to gather more of the confetti strips laying around. They realized 
that some contained entire phone numbers, addresses, more social security numbers, 
license plate numbers, and other confidential information. Some contained information 
regarding police incident reports and police controlled events. The logo and the 
information on the shredded documents made it possible to tie them to the Nassau 
County Police Department, which polices parts of Long Island. It was unknown how 
the strips ended up at the parade, but after being notified of the matter, the Nassau 
County Police Department stated that they will be conducting an investigation into this 
matter as well as reviewing their procedures for the disposing of sensitive documents. 
Macy’s said that they used only commercially manufactured multicolor confetti for the 
parade. 

Source: http://www.net-security.org/secworld.php?id=14012 

19. November 25, WCAX 3 Burlington - (Vermont) Norwich police cruisers destroyed by 
fire. The Norwich, Vermont Police Department lost all of their cruisers in a fire. The 
fire was reported in the Norwich Police Department parking lot November 22. Fire 
crews found all three cars ablaze when they arrived. They got the fire out quickly but 
the cruisers were completely destroyed. Norwich police said they found evidence of an 



accelerant, indicating the fire was intentionally set. But Vermont State Police fire 
investigators said the blaze was not suspicious. The loss to the department was valued 
at $100,000. It could take as long as 2 months to replace the fleet. The department was 
borrowing vehicles from other departments in the mean time. 

Source: http://www.wcax.com/story/20164658/police-fire-that-destroyed-norwich- 
cruisers-not-suspicious?hpt=us bn7 

20. November 24, Associated Press - (Alabama) Sheriff: Man opened fire on 2 Alabama 
deputies. A shootout left one Alabama deputy sheriff dead and another in critical 
condition November 24 when they checked on a man at his mobile home and he 
opened fire on them, authorities said. The Baldwin County sheriff told the Mobile 
Press-Register that gunfire erupted November 23 after a man pulled a handgun on a 
deputy and his colleagues outside the man’s home. The deputy was fatally wounded 
after responding with two other deputies to a family disturbance call at the residence. 
Deputies returned fire, killing the man. The deputy was transported to a local hospital, 
where he was pronounced dead. The second deputy remained in critical condition at the 
same hospital November 24. 

Source: http://www.katv.com/story/20177094/sheriff-man-opened-fire-on-2-alabama- 
deputies 

21 . November 23, Knoxville News-Sentinel - (Tennessee) Police badges, gear stolen from 
from Roane supply store. Police are searching for the thief who broke into a Roane 
County, Tennessee police-supply store. The Kingston Police Department said A-l 
Tactical Supply store in Kingston was burglarized sometime between November 22 and 
November 23. The burglars stole at least $1,321 in merchandise. Four gold metal 
Tennessee Highway Patrol badges with “chaplain” etched on them were taken along 
with 6 sets of silver Smith & Wesson handcuffs, 1 duty jacket in neon yellow, 6 
reversible black pistol belts, 3 Pelican flashlights, 1 emergency hammer, 2 pairs of duty 
boots, and 12 keychain-style units of chemical spray. 

Source: http://www.knoxnews.com/news/2012/nov/23/police-badges-gear-stolen-from- 
from-roane-supply/ 

For another story, see item 31 
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Information Technology Sector 

22. November 26, Threatpost - (International) Researcher finds nearly two dozen 

SCADA bugs in a few hours’ time. A researcher at Exodus Intelligence says that after 
spending a few hours looking for bugs in SCADA applications, he came up with more 
than 20, several of which are remote code-execution vulnerabilities. The vice president 
of research at Exodus said that finding the flaws was not even difficult. In fact, he said 
that locating the software was more difficult than finding the bugs themselves. He said 
he decided to go after the SCADA apps, which he had never researched before, after 
seeing a video posted by ReVuln the week of November 19. In the video, ReVuln 
researchers say they have server-side remote code-execution flaws in software from 
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GE, Schneider Electric, Siemens, Kaskad, ABB/Rockwell, and Eaton. The Exodus 
researcher also found flaws in Schneider Electric, Rockwell, and Eaton apps, as well as 
in software from Indusoft and RealFlex. ReVuln does not disclose vulnerabilities to 
vendors, but instead keeps the information to itself and sells it to customers. The 
Exodus researcher, meanwhile, said he plans to disclose all of the bugs he found to the 
Industrial Control Systems-Cyber Emergency Response Team (ICS-CERT). Of the 23 
bugs he discovered, 7 of them were remotely exploitable code execution flaws. 

Source: http://threatpost.com/en us/blogs/researcher-fmds-nearly-two-dozen-scada- 
bugs-few-hours-time-1 12612 

23. November 25, The H - (International) eBay closes critical security holes. The online 
auction house eBay has fixed two vulnerabilities in its U.S. Web site. One of the 
vulnerabilities was a critical SQL injection hole in the site’s selling area that gave 
potential attackers unauthorized read and write access to one of the company’s 
databases. The hole was discovered by a security researcher, who confidentially 
reported the security issue to eBay. The researcher said that the company responded 
quite quickly and closed the hole after 20 days. The other hole was a cross-site 
scripting (XSS) vulnerability that enabled attackers to inject JavaScript code into the 
eBay server for execution via a specific URL. The vulnerability could have been 
exploited to steal other eBay users’ access credentials. The company told The Register 
November 22 that the hole had been fixed. 

Source: http://www.h-online.com/security/news/item/eBay-closes-critical-security- 
holes-1756422.html 

24. November 23, Threatpost - (International) Symantec warns of new malware 
targeting SQL databases. Symantec is warning of a new bit of malware that appears 
to be modifying corporate databases, particularly in the Middle East, though its 
showing up elsewhere in the world too. W32.Narilam, first discovered November 15, 
follows a similar pattern of other worms by copying itself onto infected machines, 
adding registry keys and propagating through removable drives and network shares. 
“What is unusual about this threat is the fact that it has the functionality to update a 
Microsoft SQL database if it is accessible by OLEDB. The worm specifically targets 
SQL databases with three distinct names: alim, maliran, and shahd,” wrote a Symantec 
security researcher. Once Narilam finds the targeted databases, it looks for financial 
terms such as “BankCheck,” “A_sellers” and “buyemame” and Persian terms l ik e 
“Pasandaz” (“Savings”) and “Vamghest” (“Instant Loans”). The malware also deletes 
tables with the following names: A_Sellers, person and Kalamast. “The malware does 
not have any functionality to steal information from the infected system and appears to 
be programmed specifically to damage the data held within the targeted database,” the 
researcher wrote. The overall infection rate is low at the moment, but those whose 
networks are not properly protected could see business disrupted, he said. 

Source: http://threatpost.com/en u s/bl ogs/sy mantcc- warns-nc w- mal ware-tar gcti ng-sq 1 - 
databases- 1 12312 



25. November 23, Softpedia - (International) Numerous .eu domains registered to host 
BlackHole exploit kit. Security researchers from Sophos reveal that a number of 
malicious .eu domains have been registered by cybercriminals and set up to host the 
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infamous BlackHole exploit kit. In order to avoid security filtering, cybercrooks have 
registered several domains, which they use to infect the computers of unsuspecting 
internauts. After closely analyzing the domains, experts have noticed that they all 
resolve to the IP address of a server located in the Czech Republic. The server hosts 
over 100 domains utilized as exploit sites and gateways for adult Web sites. The 
cybercriminals seem to have a clever method of keeping their operations online. This 
month they registered domains such as nrxpxq.eu, vjtjpy.eu, xzjvhs.eu, or xipuww.eu, 
while a few months ago they registered domains hosted on the .in Top Level Domain 
(TLD). Each of the domains is active only for a short period of time and all their names 
appear to follow this pattern of 6 random characters. One connection between the 
domains appears to be Finland. The .in domains were all registered by someone 
apparently from Finland and the .eu registrant’s language was set to Finnish. 

Source: http://news.softpedia.com/news/Numerous-eu-Domains-Registered-to-Host- 
BlackHole-Exploit-Kit-309360.shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 



26. November 26, WMUR 9 Manchester - (New Hampshire) 30 people homeless after 
Manchester fire. Thirty people were homeless after a three-alarm fire swept through 
an apartment building in Manchester, New Hampshire, November 25. The Manchester 
Fire Chief said a Manchester police officer spotted the flames at the three-and-a-half 
story building while on routine patrol. That officer called for help and then ran inside to 
start getting everyone out. Firefighters arrived a few minutes later and rescued six 
people. By the time firefighters arrived, the fire was already spreading through the top 
floors and roof of the building. No one was hurt in the fire, and the American Red 
Cross was providing the victims with a place to stay warm and was working to identify 
all the needs. Investigators said it appeared the fire started on the roof of a first floor 
balcony and was caused by an electrical issue. Damages from the fire were estimated at 
$250,000. 

Source: http://www.wmur.com/news/nh-news/30-people-homeless-after-Manchester- 



fire/-/9857858/17541414/-/7mfbi4/-/index.html 
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27. November 25, Associated Press - (Massachusetts) Utility worker pierced pipe before 
Springfield, Mass., gas explosion that injured 18 people and damaged 42 
buildings. A utility worker responding to reports of a natural gas leak in Springfield, 
Massachusetts, punctured a pipe and an unknown spark ignited a massive explosion 
that injured 1 8 people and damaged 42 buildings, the State fire marshal announced 
November 25. The November 23 natural gas blast in the city’s entertainment district 
was caused by “human error,” the fire marshal said at a news conference. The worker 
was trying to locate the source of the leak with a metal probe that tests natural gas 
levels when the probe damaged the underground pipe, he said. A flood of gas then built 
up in a building that housed a strip club, and a spark touched off the blast, officials 
said. Preliminary reports showed the blast damaged 42 buildings housing 115 
residential units. Three buildings were immediately condemned, and 24 others require 
additional inspections by structural engineers to determine whether they are safe. The 
building that housed the Scores Gentleman’s Club was destroyed. After the pipe was 
ruptured, authorities evacuated several buildings. Most of the people injured were part 
of a group of gas workers, firefighters, and police officers who ducked for cover behind 
a utility truck just before the blast. The truck was destroyed. 

Source: http://www.nydailvnews.com/news/national/utility-worker-pierced-pipe-mass- 
gas-explosion-article-1 .1207741 

28. November 25, Associated Press - (Indiana) 1 hurt, 40 displaced in Fort Wayne 
apartment fire. One person was hospitalized and about 40 people were displaced 
following an apartment fire in Fort Wayne, Indiana. A Fort Wayne Fire Department 
spokeswoman said the injured person was in good condition with a smoke-related 
complaint following the fire November 25 at the Baldwin Creek Apartments. The 24- 
unit apartment building where the fire occurred sustained heavy damage after the fire. 
The Red Cross was assisting the 40 people displaced by the fire. 

Source: http://www.wishtv.com/dpp/news/indiana/l-hurt-40-displaced-in-fort-wayne- 
apartment-fire 

29. November 25, KLTV 7 Tyler - (Texas) S. Springs apartment complex heavily 
damaged by fire. A Sulphur Springs, Texas apartment complex was left heavily 
damaged and numerous persons were left without a home after a November 25 fire. 
Officials said that 17 apartments were heavily damaged and numerous surrounding 
apartments received smoke and water damage. The local chapter of the American Red 
Cross set up a shelter at the Sulphur Springs Church of the Nazarene for people who 
were displaced by the fire. They were expecting around 35 to 40 people. The Red Cross 
will start assessing those peoples’ needs November 26. Two firefighters were injured 
during the fire. One suffered a knee injury and was treated on the scene, the second was 
hit in the face by a nozzle and was transported to a local hospital. Several residents in 
the area were also treated on the scene for smoke inhalation. 

Source: http://www.kltv.com/story/20179536/crews-on-the-scene-of-apartment -fire-in- 
sulphur-springs 

30. November 25, WNCF 32 Montgomery - (Alabama) Fire destroys Ashton apartment 
building in Montgomery, displaces 30 residents. A November 25 fire in 
Montgomery, Alabama, destroyed an apartment building, injuring 3 people and leaving 
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30 others without a home. Montgomery Fire investigators said it took over an hour for 
more than 15 fire units to extinguish the flames. The flames turned the apartments into 
a complete loss. The fire spread across 16 units. Investigators said the blaze ignited in a 
second floor kitchen. A Montgomery Fire Department spokesperson said two residents 
and one firefighter suffered minor injuries. The 30 people who lost their belongings to 
the fire are being temporarily housed in hotels by the Red Cross. 

Source: http://www.wncftv.com/localnews/Ashton-Apartment-Building-Destroyed-In- 
Fire-In-Montgomery-1 8078357 1 .html 

3 1 . November 25, WCVB 5 Boston - (Massachusetts) Two firefighters injured in 6-alarm 
Leominster fire. Two firefighters were injured battling a six-alarm fire in downtown 
Leominster, Massachusetts, when the rear of the building collapsed November 24. The 
fire chief said the firefighters who were injured were in a bucket on a ladder truck when 
a wall collapsed on them. The firefighters, from the nearby Westminster department, 
were treated at a local hospital in Leominster for non-life threatening injuries and 
released. The fast-moving fire destroyed the former Columbia Hotel. More than 30 
people lived in apartments in the building. The chief of police said on the department’s 
Facebook page, “the building and most of its contents were a total loss.” Eight 
businesses were also lost in the fire. The American Red Cross assisted the 39 people 
who were displaced. 

Source: http://www.wcvb.com/news/local/central-massachusetts/Two-firefighters- 
iniured-in-6-alarm-Leominster-fire/-/l 1983998/17540454/-/format/rsss 2.0/item/0/- 
/10tl8gu/-/index.html 

32. November 24, KSNV 3 Las Vegas - (Nevada) One dead, two injured in complex with 
3 fires in 6 months. One man died, a woman suffered smoke inhalation injuries, and a 
firefighter was injured November 24 in an apartment fire, the third fire in six months at 
a west side apartment complex. The fire broke out in a second-story unit at the Alpine 
Village Apartments in Las Vegas. The second-story apartment was gutted and three 
other units received moderate fire and water damage. Four units on the first floor 
sustained smoke and water damage. About 75 firefighters fought the blaze and had it 
put out 20 minutes after their arrival. A Las Vegas Fire & Rescue Department 
firefighter was taken to the hospital with unspecified injuries that were not life- 
threatening. The American Red Cross is assisting residents from 13 apartments. There 
were 26 displaced residents, officials said. The damage was estimated at $200,000. 
Source: http://www.mvnews3.com/content/news/storv/One-dead-two-injured-in- 
complex-with-3-fires-in-6/8DxIM-gr4U-OiRnI 4Xa9Q.cspx 

33. November 23, New York Times - (New York) 27 injured in fire in lower Manhattan 
office tower. At least 27 people were treated for smoke inhalation outside a downtown 
office tower after a fire broke out November 23, the Fire Department said. The 
building, which was still without power and operating on generators, is home to city 
agencies and large private companies, including the Department of Transportation and 
Standard & Poor’s. The building remains reliant on power from generators, but it was 
electrical work, not a mishap connected to a temporary power generator, that sparked 
the fire, the department said. “The fire at 55 Water Street was caused by a short in a 
feeder cable, which was re-energized this morning as part of repair work to electrical 
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cables damaged during the storm,” said a fire department spokesman. More than 80 
firefighters responded to the fire, the department said. At least 1 firefighter was among 
the 27 treated at the scene; 4 of those were taken to a local hospital for further 
evaluation. 

Source: http://cityroom.blogs.nytimes.eom/2012/l 1/23/27-injured-in-fire-in-lower- 
manhattan-officer -tower/ 
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Nothing to report 
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34. November 26, Dredging Today - (California) Grants awarded for levee evaluations 
and repairs. The Ventura County Watershed Protection District’s Board of 
Supervisors accepted grants from the California Department of Water Resources for a 
mix of local levee evaluations and critical levee repairs throughout Ventura County, 
Dredging Today reported November 26. The Levee Grant Program was created by the 
Department of Water Resources to assist local public agencies responsible for flood 
protection. Levee Evaluation Funding provides the funds necessary to conduct surveys, 
hydrology and hydraulic studies, and geotechnical evaluations of levees at risk of 
failing. Levee Repair Funding assists flood management agencies with critical repairs 
of local flood control facilities including but not limited to, erosion-damaged levees, 
levees with unstable slopes, and other unstable facilities. The 10 grants awarded to the 
District account for almost 20 percent of the total available statewide and was the third 
highest total among recipient counties. 

Source: http://www.dredgingtoday.eom/2012/l 1/26/grants-awarded-for-levee- 
evaluations-and-repairs-usa/ 

35. November 26, Lafourche Parish Comet - (Fouisiana) Grand Isle still waiting for 
levee repairs. Three months after Hurricane Isaac, Grand Isle, Fouisiana, is still 
waiting for repairs to the island’s levee system, which suffered severe erosion from the 
storm’s surge and waves, the Fafourche Daily Comet reported November 26. However 
the Grand Isle mayor said he was told by the U.S. Army Corps of Engineers that the 
repairs would not begin until June. Isaac pounded ashore in Fouisiana in late August, 
making a direct hit on Grand Isle and neighboring Fourchon Beach. The storm pounded 
the island with surge and waves for nearly a full day, eroding away Grand Isle’s 
already damaged “burrito levee” system. The burrito levee features a geotextile core 
filled with sand to help strengthen the levee against erosion. The mayor said the levee 
was already damaged before Isaac. The fabric core of the levee burst, allowing most of 
the levee to be washed away by the surge. About a mile of the levee was taken out on 
the island’s western side, near Caminada Pass, he said. A corps spokeswoman said the 
corps performed a damage assessment on the levee in September. It was developing a 
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project report to address those levee damages. That report was scheduled to be 
completed in January. She said the repairs will likely focus on replacing the damaged 
section of geotextile tube and rebuilding the sand dune crown that covers it. The corps 
may also place stone to help prevent future erosion along the western end of the levee 
alignment. The project will likely cost between $8 million and $10 million. The Corps 
hopes to bid out construction on the project in April. 

Source: http://www.dailvcomet.com/article/20121 126/ ARTICLES/121 129765 
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